Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/114016CE65DB11F0A01C3E60C4F9AE02.roa
File:                     114016CE65DB11F0A01C3E60C4F9AE02.roa (raw, json)
Hash identifier:          KNbruYSf1caR+avFgp2kJOhFS2xDq+YQHk8sfsca8TA=
Subject key identifier:   12:61:3C:AF:65:F3:23:71:D2:14:20:4A:9B:EE:F1:49:7D:34:1A:9E
Certificate issuer:       /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial:       2283
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/114016CE65DB11F0A01C3E60C4F9AE02.roa
Signing time:             Sun 02 Nov 2025 16:03:22 +0000
ROA not before:           Sun 02 Nov 2025 16:03:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133752
IP address blocks:        180.210.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
                          rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 15:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8835 (0x2283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
        Validity
            Not Before: Nov  2 16:03:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690780ca-d0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:cd:43:c6:7d:ba:53:e0:ee:fd:50:38:48:
                    d5:10:73:de:bf:83:f9:da:05:83:5b:e7:30:ef:97:
                    9a:5a:0e:ba:c3:8b:e7:9b:35:b4:da:54:ca:09:3e:
                    04:b7:f3:02:a3:65:6a:55:bb:02:b2:e9:3f:97:9e:
                    a2:d3:ef:e3:24:5e:ac:7a:15:59:f1:5b:d3:6f:0b:
                    45:a5:89:a2:a7:ef:a0:2f:d4:de:d5:d2:dd:1d:0e:
                    1f:d4:9b:f1:2a:35:de:14:88:69:88:57:43:e0:18:
                    38:2d:e5:fb:31:cc:0f:d2:05:c9:46:3a:48:3a:0c:
                    49:ed:ac:32:40:6d:8f:f1:ab:ec:00:aa:69:79:9c:
                    dc:83:8d:da:8a:29:ae:3f:a5:0e:87:e4:64:1a:aa:
                    01:2a:6f:bc:5f:b5:a7:de:a0:12:67:08:42:ba:68:
                    33:b0:63:8f:95:4a:f7:aa:b3:7c:b7:86:bc:82:ef:
                    49:5a:95:1f:bf:0b:65:eb:61:6e:3a:15:80:2a:46:
                    9f:86:0d:94:8e:55:b0:93:b9:6c:3f:1f:3d:fe:d7:
                    7b:62:06:0b:a2:a9:a8:27:33:b4:71:83:7c:6d:ba:
                    a9:55:08:e7:23:1f:3b:f6:3b:88:8e:a2:4b:5c:c1:
                    be:45:94:88:17:64:58:b7:da:13:12:63:c2:78:db:
                    4d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:3C:AF:65:F3:23:71:D2:14:20:4A:9B:EE:F1:49:7D:34:1A:9E
            X509v3 Authority Key Identifier:
                keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/114016CE65DB11F0A01C3E60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.210.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:40:b3:ba:0b:20:7e:53:a9:be:14:39:74:2c:3c:81:89:1b:
         33:24:63:7d:3f:ac:94:ee:fe:76:8a:bc:b1:a1:99:bb:e7:ec:
         06:1c:13:24:ef:c7:80:91:a1:8a:23:e2:3d:15:ca:be:a0:f6:
         79:3b:5d:e4:18:36:d3:47:ec:d4:4e:2d:30:ef:f8:d2:4d:cb:
         3f:06:27:25:71:ff:bb:6c:84:4c:54:9f:01:c8:e8:dc:f2:8c:
         63:a1:11:8e:bb:e1:88:9f:28:77:02:ae:8d:8a:ed:69:e4:fa:
         2f:73:e9:e7:77:bd:15:d3:34:02:4f:67:ff:d8:8c:0e:a8:7a:
         80:b7:4f:e6:22:b2:54:9d:61:35:b3:4c:c9:5c:24:2d:55:b3:
         9c:db:29:be:e2:1c:fc:7d:d6:55:09:51:22:bb:39:eb:88:aa:
         52:01:9a:76:af:4b:56:63:7d:fa:97:1d:4c:e0:87:52:59:7e:
         4f:9f:80:bb:8f:42:b9:d2:89:d7:aa:e0:71:12:0a:27:65:6d:
         0c:bb:31:f2:ad:44:ed:d0:45:c8:d3:0d:d4:34:a6:9f:14:b7:
         3e:fa:27:4f:07:27:17:c1:77:8b:e8:95:75:51:f1:d7:c3:52:
         8f:45:e3:52:0a:e1:2e:18:4e:13:1a:79:9f:25:8e:13:b3:9d:
         37:1e:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:30:59 2025 by rpki-client